1

{user_name} created the box '{box_name}'

M

false

Vault

2

{user_name} updated the box '{box_name}'

M

false

Vault

3

{user_name} deleted the box '{box_name}'

M

false

Vault

4

{user_name} revoked the box '{box_name}'

M

false

Vault

100

{user_name} created the secret '{secret_name}' in the box '{box_name}'

M

false

Vault

101

{user_name} updated the secret '{secret_name}' in the box '{box_name}

H

false

Vault

102

{user_name} deleted the secret '{secret_name}' from the box '{box_name}'

H

false

Vault

103

{user_name} revoked the secret '{secret_name}' from the box '{box_name}'

H

false

Vault

104

{user_name} checked out the secret '{secret_name}' from the box '{box_name}'. Secret version is {secret_version}. Lease expiration: {expiration}.

H

false

Vault

105

{user_name} checked in version {secret_version} of secret '{secret_name}' in the box '{box_name}'

H

false

Vault

106

Secret '{secret_name}' in the box '{box_name}' was rotated. New secret version is {secret_version}.

H

false

Vault

107

Rotating the secret '{secret_name}' in the box '{box_name}' failed. Current secret version is {secret_version}.

M

false

Vault

109

{user_name} accessed secret data from the secret '{secret_name}' in the box '{box_name}'. Secret version accessed is {secret_version}.

H

false

Vault

110

{user_name} updated the secret data of the secret '{secret_name}' in box '{box_name}'. New secret version is {secret_version}.

M

false

Vault

111

{user_name} changed the current version of the secret '{secret_name}' in the box '{box_name}'. Current secret version is {secret_version}

M

false

Vault

112

Setting secret '{secret_name}' version {secret_version} in the box '{box_name}' invalid.

M

false

Vault

113

{user_name} appended key certificate pair to the secret '{secret_name}' in the box '{box_name}'.

H

false

Vault

115

{user_name} removed key certificate pair from the secret '{secret_name}' in the box '{box_name}'.

H

false

Vault

200

Lease for the secret '{secret_name}' from the box '{box_name}' checked out by '{checkout_user}' expired

H

false

Vault

201

{user_name} deleted the lease for the secret '{secret_name}' from the box '{box_name}'

H

false

Vault

202

{user_name} renewed the lease for the secret '{secret_name}' from the box '{box_name}'. Secret version is {secret_version}. Lease expires at '{expiration}'.

M

false

Vault

300

{user_name} created the policy '{policy_name}'

M

false

Vault

301

{user_name} updated the policy '{policy_name}'. New policy version is {policy_version}.

M

false

Vault

302

{user_name} deleted the policy '{policy_name}'

M

false

Vault

303

{user_name} changed the current version of the policy '{policy_name}'. Current policy version is {policy_version}.

M

false

Vault

400

Secret '{secret_name}' from the box '{box_name}' was not rotated due to outstanding lease(s). Current secret version is {secret_version}.

M

false

Vault

500

User '{user_name}' logged in successfully.

H

false

Vault

501

Active Directory login for {username} succeeded but PASM Vault failed to get information about user. The user might not belong to the Active Directory Domain {domain_name} or user/group base dn in Active Directory configuration might be wrong. Please contact Vault Administrator to validate the Active Directory setup.

H

false

Vault

502

Login failure for Active Directory user {username} from {client_ip}. Reason: {reason}

H

false

Vault

503

User '{user_name}' logged in successfully using Personal Access Token {token_name}.

H

false

Vault

504

{user_name} enabled authentication inheritance

M

false

Vault

505

Authentication settings for inheriting vault {vault_name} {action} by System Admin

M

false

Vault

600

{user_name} updated AD Setting '{ad_setting_name}'

M

false

Vault

601

{user_name} changed AD Domain from '{old_ad_setting_name}' to '{ad_setting_name}'

M

false

Vault

602

{user_name} Added AD Setting '{ad_setting_name}'

M

false

Vault

700

{user_name} created the secret rotation job {job_id} for the box '{box_name}'

M

false

Vault

701

Secret rotation job {job_id} started for the box '{box_name}', requested by {user_name}

M

false

Vault

702

Secret rotation job {job_id} completed for the box '{box_name}', requested by {user_name}

M

false

Vault

703

Secret rotation job {job_id} completed for the box '{box_name}', requested by {user_name}. Rotation of {failed_count} Secret(s) failed.

M

false

Vault

704

{user_name} deleted the secret rotation job {job_id} for the box '{box_name}'

M

false

Vault

800

{user_name} updated vault '{vault_name}' settings. 'degraded mode availability' {degraded_mode}. 'OIDC authentication' {oidc}.

M

false

Vault

801

{user_name} renamed vault '{old_name}' to '{vault_name}'.

M

false

Vault

802

{user_name} updated kmip '{vault_name}' settings of authentication method to AD based authentication with Active Directory domain '{ad_domain}'

M

false

Vault

803

'{user_name}' initiated HSM {op} operation on PASM vault '{vault_name}'.

M

false

Vault

804

'{user_name}' updated HSM DEK cache timeout of PASM vault '{vault_name}' to {period}.

M

false

Vault

805

HSM {state} successfully on PASM vault '{vault_name}'.

M

false

Vault

806

{user_name} updated PASM vault '{pasm_name}' settings about KCM information with 'kcm ip: ' {kcm_ip}.

M

false

Vault

807

{user_name} updated vault '{vault_name}' settings of authentication method to OIDC based authentication

M

false

Vault

900

{user_name} created the user '{name}'

H

false

Vault

901

{user_name} deleted the user '{name}'

H

false

Vault

902

{user_name} updated the user '{name}'

H

false

Vault

903

Account {user_name} locked for 5 minutes due to repeated login failures

H

false

Vault

904

Account {user_name} disabled due to repeated login failures

H

false

Vault

905

Login failure for Local user {username} from {client_ip}. Reason: {reason}

H

false

Vault

906

Successfully updated password for user: {username}

H

false

Vault

907

Account {user_name} enabled Two-factor authentication

M

false

Vault

908

Account {user_name} disabled Two-factor authentication

M

false

Vault

909

{user_name} updated the local user password policy

M

false

Vault

910

{user_name} enforced Two-factor authentication

M

false

Vault

911

{user_name} removed enforcement of Two-factor authentication

M

false

Vault

1000

{user_name} updated kubernetes configuration of '{vault_name}'. 'degraded mode availability' {state}

M

false

Vault

1001

Login failure for Kubernetes user {username} Reason: {reason}

H

false

Vault

1002

Kubernetes User '{user_name}' logged in successfully

H

false

Vault

1100

{user_name} created Personal Access Token {token_name}

M

false

Vault

1101

{user_name} {update_info} Personal Access Token {token_name}

M

false

Vault

1102

{user_name} deleted Personal Access Token {token_name}

M

false

Vault

1200

{user_name} created OIDC user {oidc_user_email}: {oidc_user_guid}'

M

false

Vault

1201

{user_name} failed to create OIDC user {oidc_user_email}'

M

false

Vault

1202

{user_name} updated OIDC user {oidc_user_email}: {oidc_user_guid}'

M

false

Vault

1203

{user_name} failed to update OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Vault

1204

{user_name} deleted OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Vault

1205

{user_name} failed to delete OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Vault

1206

{user_name} created registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Vault

1207

{user_name} failed to create registration link for OIDC user {oidc_user_email}: {oidc_user_guid}

M

false

Vault

1208

Login failure for OIDC user {username} from {client_ip}. Reason: {reason}

M

false

Vault

1301

Approver {approver} {status} the checkout approval request. Request id {request_id}. Comment: {comment}

M

false

Vault

1302

User {user} submitted Checkout approval request for secret {secret_id} in box {box_id}. Approvers {approvers} and minimum approvals required {min_approval}

M

false

Vault

1303

User {user} submitted box secondary approval update request for box {box_id}. Approvers {approvers} and minimum approvals required {min_approval}

M

false

Vault

1304

{user_name} deleted the request '{request_id}'

M

false

Vault

1400

Secret Vault Client Certificate '{name}' created

M

false

Vault

1401

Secret Vault Client Certificate '{name}' created using Certificate Signing Request

M

false

Vault

1402

Secret Vault Client Certificate '{name}' deleted

M

false

Vault